CVE-2026-97065

Happyforms versions up to 1.26.15 are vulnerable to an unauthenticated Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts that can compromise user sessions or redirect users to malicious sites. Organizations using these versions should prioritize patching to mitigate potential exploitation risks, especially those handling sensitive user data or relying on form submissions.